Bump actions/setup-dotnet from 3 to 4 (#37)

Bumps [actions/setup-dotnet](https://github.com/actions/setup-dotnet)
from 3 to 4.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/actions/setup-dotnet/releases">actions/setup-dotnet's
releases</a>.</em></p>
<blockquote>
<h2>v4.0.0</h2>
<h2>What's Changed</h2>
<p>In the scope of this release, the version of the Node.js runtime was
updated to 20. The majority of dependencies were updated to the latest
versions. From now on, the code for the setup-dotnet will run on Node.js
20 instead of Node.js 16.</p>
<p><strong>Breaking changes</strong></p>
<ul>
<li>Update Node.js runtime to version 20 by <a
href="https://github.com/harithavattikuti"><code>@​harithavattikuti</code></a>
in <a
href="https://redirect.github.com/actions/setup-dotnet/issues/484">#484</a></li>
<li>Sequential version install fix by <a
href="https://github.com/nikolai-laevskii"><code>@​nikolai-laevskii</code></a>
in <a
href="https://redirect.github.com/actions/setup-dotnet/pull/433">actions/setup-dotnet#433</a>
In setup-dotnet@v3, the dotnet executable was overwritten during each
action run, sometimes leading to failures if the executable was still in
use. This issue was resolved in setup-dotnet@v4 by introducing an
additional install-script run that installs the LTS version of the
dotnet executable and utilizes it for all subsequent dotnet
installations. The actual download is performed only once per workflow
by the initial install-script run. To use older versions, utilize
global.json. For more details, refer to the <a
href="https://github.com/actions/setup-dotnet?tab=readme-ov-file#usage">documentation</a>.</li>
</ul>
<p><strong>Non-breaking changes</strong></p>
<ul>
<li>Refactor installer by <a
href="https://github.com/nikolai-laevskii"><code>@​nikolai-laevskii</code></a>
in <a
href="https://redirect.github.com/actions/setup-dotnet/pull/432">actions/setup-dotnet#432</a></li>
<li>Allow json comments by <a
href="https://github.com/nikolai-laevskii"><code>@​nikolai-laevskii</code></a>
in <a
href="https://redirect.github.com/actions/setup-dotnet/pull/431">actions/setup-dotnet#431</a></li>
<li>Update fast-xml-parser and dotnet installer scripts by <a
href="https://github.com/IvanZosimov"><code>@​IvanZosimov</code></a> in
<a
href="https://redirect.github.com/actions/setup-dotnet/pull/437">actions/setup-dotnet#437</a></li>
<li>Update dependencies by <a
href="https://github.com/IvanZosimov"><code>@​IvanZosimov</code></a> in
<a
href="https://redirect.github.com/actions/setup-dotnet/pull/440">actions/setup-dotnet#440</a></li>
<li>Bump word-wrap from 1.2.3 to 1.2.4 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/actions/setup-dotnet/pull/444">actions/setup-dotnet#444</a></li>
<li>Update installers by <a
href="https://github.com/nikolai-laevskii"><code>@​nikolai-laevskii</code></a>
in <a
href="https://redirect.github.com/actions/setup-dotnet/pull/462">actions/setup-dotnet#462</a></li>
<li>Update semver by <a
href="https://github.com/dmitry-shibanov"><code>@​dmitry-shibanov</code></a>
in <a
href="https://redirect.github.com/actions/setup-dotnet/pull/468">actions/setup-dotnet#468</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a
href="https://github.com/HarithaVattikuti"><code>@​HarithaVattikuti</code></a>
made their first contribution in <a
href="https://redirect.github.com/actions/setup-dotnet/pull/484">actions/setup-dotnet#484</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/actions/setup-dotnet/compare/v3...v4.0.0">https://github.com/actions/setup-dotnet/compare/v3...v4.0.0</a></p>
<h2>v3.3.0</h2>
<h2>What's Changed</h2>
<ul>
<li>V3 - Use new .NET CDN URLs and update to latest install scripts by
<a
href="https://github.com/HarithaVattikuti"><code>@​HarithaVattikuti</code></a>
in <a
href="https://redirect.github.com/actions/setup-dotnet/pull/567">actions/setup-dotnet#567</a></li>
</ul>
<p>Some .NET binaries and installers currently hosted on Azure Content
Delivery Network (CDN) domains ending in .azureedge.net will move to new
domains as the provider, edg.io, will <a
href="https://learn.microsoft.com/en-us/azure/cdn/edgio-retirement-faq">soon
cease operations</a>. There may be downtime or unavailability of
.azureedge.net domains in the future as the .NET team is required to <a
href="https://learn.microsoft.com/azure/frontdoor/migrate-cdn-to-front-door">migrate
to a new CDN</a> and set of domains moving forward.</p>
<p>If your workflows are pinned to specific SHAs or minor tags, please
upgrade to a major release tag to avoid service disruptions. Edgio has
confirmed their services will be operational until <a
href="https://learn.microsoft.com/en-us/azure/cdn/edgio-retirement-faq">at
least January 15, 2025</a>.</p>
<p>For updates, follow <a
href="https://redirect.github.com/dotnet/core/issues/9671">dotnet/core#9671</a>.</p>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/actions/setup-dotnet/compare/v3.2.0...v3.3.0">https://github.com/actions/setup-dotnet/compare/v3.2.0...v3.3.0</a></p>
<h2>v3.2.0</h2>
<h2>What's Changed</h2>
<p>In scope of this minor release, the ability to cache the NuGet
<code>global-packages</code> folder was added in <a
href="https://redirect.github.com/actions/setup-dotnet/pull/303">actions/setup-dotnet#303</a>
by <a
href="https://github.com/nogic1008"><code>@​nogic1008</code></a></p>
<p>For caching, the action uses the <a
href="https://github.com/actions/toolkit/tree/main/packages/cache"><code>@​toolkit/cache</code></a>
library under the hood, which in turn allows getting rid of configuring
the <a
href="https://github.com/actions/cache"><code>@​actions/cache</code></a>
action separately.</p>
<p>Such input parameters as <code>cache</code> and
<code>cache-dependency-path</code> were added. The <code>cache</code>
input is optional, and caching is turned off by default,
<code>cache-dependency-path</code> is used to specify the path to a
dependency file - <code>packages.lock.json</code>.</p>
<p><strong>Example of use-case:</strong></p>
<pre lang="yaml"><code>&lt;/tr&gt;&lt;/table&gt; 
</code></pre>
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/actions/setup-dotnet/commit/3951f0dfe7a07e2313ec93c75700083e2005cbab"><code>3951f0d</code></a>
Bump undici from 5.28.4 to 5.28.5 (<a
href="https://redirect.github.com/actions/setup-dotnet/issues/596">#596</a>)</li>
<li><a
href="https://github.com/actions/setup-dotnet/commit/4849e736f1bd76c37a6dd7d4b8f84581fb6d8baf"><code>4849e73</code></a>
Bump <code>@​actions/http-client</code> from 2.2.1 to 2.2.3 (<a
href="https://redirect.github.com/actions/setup-dotnet/issues/592">#592</a>)</li>
<li><a
href="https://github.com/actions/setup-dotnet/commit/3e76c4dc412e00b3fcb875aaddbf27000f2d428b"><code>3e76c4d</code></a>
Bump actions/publish-immutable-action from 0.0.3 to 0.0.4 (<a
href="https://redirect.github.com/actions/setup-dotnet/issues/590">#590</a>)</li>
<li><a
href="https://github.com/actions/setup-dotnet/commit/91b379339b47ad470db060ea16315b66313ae78e"><code>91b3793</code></a>
Configure Dependabot settings (<a
href="https://redirect.github.com/actions/setup-dotnet/issues/585">#585</a>)</li>
<li><a
href="https://github.com/actions/setup-dotnet/commit/4b37d22250db48bbc2ccdde8ef5dbf479769f7ac"><code>4b37d22</code></a>
upgrade cache from 3.2.4 to 4.0.0 (<a
href="https://redirect.github.com/actions/setup-dotnet/issues/586">#586</a>)</li>
<li><a
href="https://github.com/actions/setup-dotnet/commit/f9d0f6282caace67f83f94183a90502136d73900"><code>f9d0f62</code></a>
Update README.md (<a
href="https://redirect.github.com/actions/setup-dotnet/issues/587">#587</a>)</li>
<li><a
href="https://github.com/actions/setup-dotnet/commit/87b7050bc53ea08284295505d98d2aa94301e852"><code>87b7050</code></a>
V4 - Use new .NET CDN URLs and update to latest install scripts (<a
href="https://redirect.github.com/actions/setup-dotnet/issues/566">#566</a>)</li>
<li><a
href="https://github.com/actions/setup-dotnet/commit/e4c228a8417679d13c6a1e7131e3e8d82dff4cd3"><code>e4c228a</code></a>
Enhance Workflows, Update Dependencies and Installer Scripts (<a
href="https://redirect.github.com/actions/setup-dotnet/issues/555">#555</a>)</li>
<li><a
href="https://github.com/actions/setup-dotnet/commit/3e891b0cb619bf60e2c25674b222b8940e2c1c25"><code>3e891b0</code></a>
Revise <code>isGhes</code> logic (<a
href="https://redirect.github.com/actions/setup-dotnet/issues/556">#556</a>)</li>
<li><a
href="https://github.com/actions/setup-dotnet/commit/2e0b25913c812a07b66494a12af8d79e4ea8d62f"><code>2e0b259</code></a>
Merge pull request <a
href="https://redirect.github.com/actions/setup-dotnet/issues/550">#550</a>
from actions/Jcambass-patch-2</li>
<li>Additional commits viewable in <a
href="https://github.com/actions/setup-dotnet/compare/v3...v4">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=actions/setup-dotnet&package-manager=github_actions&previous-version=3&new-version=4)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Author: dependabot[bot]

.github/workflows/codeql.yml

@@ -58,7 +58,7 @@ jobs:
       uses: actions/checkout@v4
 
     - name: Setup .NET
-      uses: actions/setup-dotnet@v3
+      uses: actions/setup-dotnet@v4
       with:
         dotnet-version: 9.0.x